Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier: hYZIJtSvsSsiNWYPsmY6F6PmhkJe/yRx6g0bI8odN4g=
Subject key identifier: 98:CF:28:7F:94:4C:37:F7:67:26:1C:09:3D:8B:25:EE:6C:DD:C1:37
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial: 0196CA6000C10151845053E9D3D7F42F6ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number: 0D24
Signing time: Tue 13 May 2025 16:00:11 +0000
Manifest this update: Tue 13 May 2025 16:00:11 +0000
Manifest next update: Wed 14 May 2025 16:00:11 +0000
Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: brQ1KDFISGLFx+0Megtb4Hg4afO+CuVwtMp7kPwc7xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:00:c1:01:51:84:50:53:e9:d3:d7:f4:2f:6a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Validity
Not Before: May 13 16:00:11 2025 GMT
Not After : May 14 16:00:11 2025 GMT
Subject: CN=98cf287f944c37f767261c093d8b25ee6cddc137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:c7:c3:10:af:05:cf:b0:ea:6d:9b:df:77:
ec:74:ed:e7:01:d9:de:5c:76:70:92:f7:23:32:e4:
e6:96:46:c5:bf:a6:be:6a:d5:52:ea:bb:50:b6:51:
ea:66:6a:a6:b9:c4:ac:2a:a1:e4:4c:bd:68:55:f1:
ed:bf:5b:77:f7:a0:aa:2b:98:11:57:a9:5f:72:0a:
19:1f:98:95:bf:04:c6:31:dd:c7:81:23:96:06:2b:
8e:d0:d3:26:3a:56:91:02:a7:c0:50:8b:fd:6f:94:
6f:02:c2:83:90:8d:8b:67:38:c2:03:e1:08:c3:ca:
39:3f:e9:2c:16:c0:ab:c1:aa:e4:76:b2:9c:0c:2a:
06:04:43:b8:4c:34:f6:c7:39:d8:a6:1d:c7:56:ea:
b3:7f:20:3c:e8:04:88:eb:b1:99:6a:dc:17:51:47:
43:05:6e:02:56:e4:55:ee:6a:63:78:ed:78:8e:f2:
7c:2a:72:1a:cc:72:35:fc:f6:dc:95:f3:7b:7f:66:
00:7a:24:99:34:6a:ce:dc:b6:41:09:e4:79:a5:0c:
42:5d:15:8a:ed:95:3f:06:7c:a7:ca:56:ec:e5:b0:
9b:d8:8b:79:d0:a4:0a:8a:e0:81:9d:31:fe:d8:8c:
b8:f0:12:f4:46:ec:bd:c0:da:d1:ef:df:5b:8c:23:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CF:28:7F:94:4C:37:F7:67:26:1C:09:3D:8B:25:EE:6C:DD:C1:37
X509v3 Authority Key Identifier:
keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:bb:86:77:2b:0a:33:fa:c8:6e:3f:a9:6c:9a:52:38:4b:
9a:12:46:25:b2:4b:3a:d4:9c:aa:52:d3:1b:5b:87:de:37:34:
ca:a1:36:50:2b:84:bf:41:29:e1:6c:e8:28:c3:0f:80:7c:02:
82:ad:b4:3e:3b:66:66:9d:36:14:ed:39:fa:bb:50:a0:d8:8b:
94:41:72:ef:05:da:e1:a0:fa:0d:73:37:a8:a3:9e:ef:17:71:
17:01:04:64:d2:ed:ed:6a:bd:b3:c5:8b:93:0b:85:20:4b:60:
b6:23:5b:1d:3e:a0:75:76:40:3e:3e:97:3a:96:bb:e8:c8:f8:
0d:e2:64:27:01:21:10:c5:2a:e1:54:6b:73:8a:e2:b6:33:a7:
b8:34:3c:eb:fa:e1:00:25:5c:3e:b7:8c:a5:aa:d4:59:2a:f6:
ae:57:b3:76:8b:3e:d2:7b:31:e0:e0:ec:64:7e:fc:fb:71:29:
30:5d:10:61:ff:c1:cb:7a:8a:b7:48:77:f6:fe:f2:c6:68:ca:
7a:1e:ea:4d:b0:bd:1e:85:ed:31:9c:11:d7:ea:5f:89:99:e0:
7a:2c:9b:d8:13:ac:00:2b:a2:12:66:cd:1c:88:0e:27:75:db:
e4:2b:20:ce:63:0c:54:bf:48:00:8c:48:b0:2a:cc:0b:fa:92:
57:c5:ac:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:32:30 2025 by rpki-client